Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E804D240C94D11F1875146ECCE1D38B0.roa
File:                     E804D240C94D11F1875146ECCE1D38B0.roa (raw, json)
Hash identifier:          BkvDv0o/FtGKn7m6P6vo2ty4VSmlzaTdGcJ9xeZuGr8=
Subject key identifier:   A5:1B:E5:31:72:3A:BA:1F:0E:79:FC:B0:A1:D6:53:A6:23:63:A5:DE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E804D240C94D11F1875146ECCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 10:39:47 +0000
ROA not before:           Fri 16 Oct 2026 10:39:42 +0000
ROA not after:            Fri 23 Oct 2026 10:39:42 +0000
asID:                     395886
IP address blocks:        154.86.16.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126566 (0x1ee66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 10:39:42 2026 GMT
            Not After : Oct 23 10:39:42 2026 GMT
        Subject: CN=6ad1fef3-820e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:c8:aa:bc:b8:18:a6:8f:fc:d0:1a:8e:cc:
                    c2:7a:56:5e:89:89:28:06:62:cc:16:ab:03:ba:39:
                    56:9c:3d:66:33:01:48:87:03:0d:52:e6:c5:9e:86:
                    a9:52:8f:04:15:8f:ec:ef:7d:94:c0:91:80:6f:0a:
                    3b:29:fa:4b:9e:2b:84:81:b6:54:5d:bc:35:72:5c:
                    9d:81:c5:42:57:4f:3c:99:60:8f:4a:d4:ee:3a:86:
                    10:9c:d0:79:8c:9c:83:4d:3a:d6:34:36:99:15:79:
                    fd:3d:00:2b:72:09:04:a7:4d:9e:0e:b6:2a:ba:1b:
                    06:86:25:d1:fb:23:c9:b3:72:31:a8:3f:1d:fb:2a:
                    1b:dc:6d:6d:d4:28:c6:88:a2:0f:3e:df:d1:27:8d:
                    b4:46:f5:d7:e3:ab:b9:a8:51:7a:7e:97:10:27:91:
                    24:ca:ed:30:a4:af:e4:4a:75:04:11:f8:9d:04:d5:
                    33:d1:68:dc:e5:0e:b2:dc:54:12:fe:70:a9:0f:3a:
                    ad:c6:60:4b:82:b6:9c:d0:de:46:36:8e:a4:19:1f:
                    fc:29:02:79:d2:7c:8c:cf:ad:11:4e:3e:c9:75:85:
                    b9:26:a9:ab:10:db:0f:c3:06:d0:fd:b6:9f:ad:f9:
                    15:bc:51:8c:83:b3:4f:c5:1a:7b:99:d5:10:7b:7c:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:E5:31:72:3A:BA:1F:0E:79:FC:B0:A1:D6:53:A6:23:63:A5:DE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E804D240C94D11F1875146ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:37:05:ce:17:88:12:9a:ef:ba:6d:cd:74:ca:a8:d8:b3:
         e0:fa:18:ee:bc:41:9f:10:ac:f6:14:c1:aa:b8:76:99:b8:1f:
         b9:bd:23:75:d8:8a:84:c6:2b:4e:49:56:c6:2f:c0:59:54:05:
         c9:71:84:0d:32:f3:d9:b7:3a:8c:b1:19:31:4a:9c:72:e7:55:
         87:29:dd:a3:6e:65:a5:c9:0b:b4:78:f2:fb:be:96:80:5a:6a:
         8f:e5:dc:6a:90:06:f7:cc:e8:e4:df:34:55:b2:41:4c:7e:03:
         7c:97:ec:94:d7:6d:fd:35:80:89:1f:eb:24:fa:a7:95:d3:3f:
         35:01:6b:9d:3a:37:ce:7d:0b:9d:f4:7f:f7:f5:84:d4:f7:e3:
         be:10:f8:37:54:3c:c7:d7:d9:e8:6d:41:b2:b2:85:39:00:41:
         8b:1f:12:91:de:92:38:55:5a:5a:0b:49:98:b5:6a:00:fe:29:
         55:c2:0b:03:18:5a:bd:6b:75:41:32:1c:4f:33:48:cd:f0:91:
         11:4f:4c:36:2a:83:d4:34:39:ce:16:6d:53:e4:bd:da:eb:bb:
         97:fe:91:85:1a:10:51:43:f0:83:d7:6e:4e:10:e8:a4:f2:e3:
         5d:36:81:e2:50:81:92:b8:33:2f:7c:bd:41:d3:a2:ef:60:23:
         fa:7d:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----